Why your habits matter more than antivirus software
The previous session covered AI voice cloning, and I stated plainly that I am still catching up on parts of it. This lesson is structured differently. There is no setup and no settings menu, only a position I hold firmly, and I want to walk you through the reasoning.
Here it is: antivirus software is largely a distraction at this point.
I am not telling you to uninstall it. Keep it; it catches some things. But people purchase the subscription, see the small green checkmark, and relax. Then they click the malicious link regardless, because the checkmark was never going to stop that. Antivirus is designed to catch malicious files. Most of what reaches people now is not a file. It is a text stating that your package is delayed. It is a call from "your bank" instructing you to move money to keep it safe. It is a link close enough to legitimate that you do not examine it twice.
None of that triggers an antivirus scanner. All of it is defeated by a habit.
The habits that actually matter
Here is the short list. These are not complicated, which is the point.
Slow down when something feels urgent. This is the one I would want you to retain if you forgot everything else in the course. Nearly every scam depends on your feeling rushed: account suspended in 24 hours, grandson in jail needing bail immediately, package returned to sender today. That urgency is engineered, not incidental. When a message pushes you to act quickly, that is precisely the moment to slow down.
Hover before you click. On a computer, position your cursor over a link without clicking and read where it actually leads, usually shown in the lower corner of the browser. On a phone, press and hold rather than tapping. Confirm the address matches what it claims to be.
Verify through a channel you selected, not one they provided. If "your bank" calls, hang up and dial the number on the back of your card. If "the ward" emails requesting a donation, call someone you know rather than replying to the email. This is not rudeness. It is verification.
Do not click, log in instead. If you receive a notice about your account, do not tap the link in the message. Open your banking app, or navigate to the site yourself the way you ordinarily would, and check there.
Four habits. That is genuinely the entire course distilled. Software cannot perform any of them for you.
Why I push backup codes so hard
This is where I describe something I did to myself. I set up two-factor authentication on my own accounts one Saturday, feeling responsible and satisfied. A few weeks later I got a new phone, migrated everything over, assumed I was finished, and locked myself out of my own email for roughly an hour, because I had changed phones and lost my two-factor codes with the old one.
An hour does not sound long. It felt long. I sat refreshing a "forgot access" page, considering how many services use that email to reset a password, which meant that for that hour I was locked out of far more than email.
That is why I teach backup codes first, before anything else in the whole course. Not because it is the most interesting step, but because it is the one that prevents a good habit from becoming its own emergency. If two-factor is configured and you do not have your backup codes recorded somewhere you can actually locate, you have built a lock and discarded one of the keys.
The habit beneath all the habits
Here is the part nobody enjoys hearing: none of this is about being intelligent or unintelligent. I have said it before in this class and will repeat it, because it matters. The people who fall for these things are not foolish. They are busy, or tired, or having a bad day, and the scam is constructed by people whose entire occupation is locating that exact moment.
Software does not get tired. You do. So the habit that matters most is simply noticing when you are rushed and granting yourself the five additional minutes to verify. Five minutes late beats one wrong click, every time.
Before next time
Select one habit from the list above, the one you are weakest on, and apply it deliberately this week, even on a message you are fairly certain is legitimate. Observe how it feels to actually check rather than assume.
~kenneth